Topic: Data protection

Cyber incidents are driving data breach, supply chain and mass claims in the UK, prompting organisations to reassess cyber risk and liability.

The French National Data Protection Authority and the AI and Digital Council examine the data protection, liability and user control risks associated with agentic AI systems.

On 16 June 2026, the UK government announced the new “National Quantum Standards Network”, a world-first national framework for quantum standards to coordinate standards for quantum technologies.

Norton Rose Fulbright has been closely monitoring a growing body of decisions released in 2026, that address whether GenAI prompts and outputs are entitled to privilege protections.

On June 1, 2026, the Florida Office of the Attorney General, State of Florida and the Florida Department of Legal Affairs, sued OpenAI and its CEO Sam Altman, accusing the company of ignoring safety warnings and releasing ChatGPT while knowing it was harmful to users.

On May 28, 2026, a California federal judge held in Mobley v. Workday that artificial intelligence bias-testing data may be protected against discovery based on the attorney-client privilege shield.

Recent decisions are beginning to define how courts treat privilege claims involving generative AI, particularly when parties use publicly available tools.

A new June 2026 Executive Order gives the federal government a chance to review certain advanced AI models before they’re released—part of a broader push to stay ahead of emerging cybersecurity risks.

Colorado just rewrote its own AI regulation, affecting every company developing or deploying AI in a way that may touch a Colorado resident.

Healthcare providers are rapidly adopting AI for clinical and operational uses, often involving protected health information that is governed by HIPAA’s Privacy Rule.